Modified documentation for CSRF as mentioned in #984
Merge pull request #993 from kevin-brown/issue_984_docs

Made the CSRF documentation more clear